5ce35fbb0032ae0e8491dd920059dded9e9c311cb6953d6caf782140e9ed3e90 | Triage

Sharing

General

Target

5ce35fbb0032ae0e8491dd920059dded9e9c311cb6953d6caf782140e9ed3e90N
Size

84KB
Sample

240920-vv261sybnq
MD5

aa5a608392631efbd5e6ebc4b7008fc0
SHA1

0b5093bb96c7ac7009438e981657cc6b88ad4e93
SHA256

5ce35fbb0032ae0e8491dd920059dded9e9c311cb6953d6caf782140e9ed3e90
SHA512

3db49e834eb45130037e31987744318361b036cce4e0e00951646320a4c05187a4558edff4454e7e2d0124902e0605f0e1269fb4ecc74d97863b29e206ad3d29
SSDEEP

1536:FqO80RIUM9MWtXVgWDm8bRhzLXSREXHfVPfMVwNKT1iqWUPGc4T7VLd:FR52BbRZLCREXdXNKT1ntPG9pB

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  5ce35fbb0032ae0e8491dd920059dded9e9c311cb6953d6caf782140e9ed3e90N
- Size
  
  84KB
- MD5
  
  aa5a608392631efbd5e6ebc4b7008fc0
- SHA1
  
  0b5093bb96c7ac7009438e981657cc6b88ad4e93
- SHA256
  
  5ce35fbb0032ae0e8491dd920059dded9e9c311cb6953d6caf782140e9ed3e90
- SHA512
  
  3db49e834eb45130037e31987744318361b036cce4e0e00951646320a4c05187a4558edff4454e7e2d0124902e0605f0e1269fb4ecc74d97863b29e206ad3d29
- SSDEEP
  
  1536:FqO80RIUM9MWtXVgWDm8bRhzLXSREXHfVPfMVwNKT1iqWUPGc4T7VLd:FR52BbRZLCREXdXNKT1ntPG9pB
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence